NCCIC Weekly Analytic Synopsis Product – October 1, 2015

Apple Releases Security Updates for OS X El Capitan, Safari, and iOS

Siemens SIMATIC HMI Devices Vulnerabilities (ICS-CERT Advisory 15-099-01) – Products Used in Water and Wastewater and Energy Sectors - Updated September 29, 2015

How Malware Can be Inserted into Safe-seeming Word Documents

Honeywell Experion PKS Directory Traversal Vulnerability (ICS-CERT Advisory 15-272-01) – Product Used in the Energy Sector

Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service Vulnerability (ICS-CERT Advisory 15-146-01P) – Product Used in the Water and Wastewater and Energy Sectors - Updated September 29, 2015

Cookies Set During Non-Secure Browsing Sessions Can Help Facilitate Attacks During Supposedly Secure Browsing Sessions

Updated Manual on Defense Support of Civil Authorities Addresses Cyber Incidents for the First Time

N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (ICS-CERT Advisory 15-160-01) – Products Used in the Water and Wastewater and Energy Sectors - Updated September 24, 2015

Endress+Hauser Fieldcare/CoreWrights HART Comm DTM XML Vulnerability (ICS-CERT Advisory 15-265-01) – Product Used in the Water and Wastewater Sector